Dorothy vs SOC Prime Threat Detection Marketplace: side-by-side comparison (2026)

Dorothy: Dorothy is a tool to test monitoring and detection capabilities for Okta environments, with modules mapped to MITRE ATT&CK® tactics.

SOC Prime Threat Detection Marketplace: Threat detection marketplace with Sigma rules for SIEM and shift-left detection. Built by SOC Prime.

The table above shows where their features, integrations, deployment and company size fit differ.

Dorothy is open-source with 191 GitHub stars. SOC Prime Threat Detection Marketplace is made by SOC Prime. The vendor behind a product decides its roadmap, support, and longevity, so check each company's profile before you commit.

Often, yes. Dorothy and SOC Prime Threat Detection Marketplace are both Detection Engineering products, and both cover MITRE ATT&CK, Detection Rules. Key differences: Dorothy is Free while SOC Prime Threat Detection Marketplace is Commercial, Dorothy is open-source. Use the table above to see where features, deployment and company size fit differ.